Home Malware Programs Adware Freview

Freview

Posted: October 16, 2008

Freview, also known as Freviewer, is an adware application created to generate annoying popups ads. These popups usually promote adult sites or fake anti-spyware programs. If you click on any of the popups generated by Freview, you'll probably be redirected to a malcicious website that sells rogue anti-spyware programs as legitimate softwares. Even though Freview does not directly cause the harm to the computer, it does send users to malicious websites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %profile%\application data\fw\md.dll
    2 %program_files%\freeviewer\freeviewer.exe
    3 %program_files%\freeviewer\logo.ico
    4 %program_files%\freeviewer\terms.txt
    5 %program_files%\freeviewer\uninstall.exe
    6 4554.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\fwcvHKEY_CURRENT_USER\software\fwcv guidHKEY_CURRENT_USER\software\fwcv tHKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{9c3baadb-88d9-4f8e-9501-4a5422c90ad1}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}free viewer displaynamefree viewer uninstallstring
Loading...